The vulnerability in the Linux kernel's mac80211 WiFi component arises from the use of a static variable for rx_result in the ieee80211_invoke_fast_rx() function, which is documented as safe for parallel RX. Because rx_result was static, concurrent invocations shared the same instance, allowing one caller to overwrite another's result between ieee80211_rx_mesh_data() and the subsequent processing switch. This flaw could cause packets that were queued or consumed to be incorrectly processed again or returned as queued, leading to potential data integrity and availability issues. The fix involved making rx_result an automatic variable to ensure each invocation has its own independent result instance.

The vulnerability can lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H) of WiFi packet processing in affected Linux kernels. Misprocessing of packets could allow attackers to disrupt network communications or cause data corruption in the WiFi stack. However, there are no known exploits in the wild at this time.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should upgrade to these or newer kernel versions to remediate the vulnerability. Since this is a kernel-level issue, applying the official kernel update from the vendor is the recommended mitigation.